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permission types may be set, the present invention permits for fine grain control over what 
kind of access to the presence information is permitted. 

The present invention may be embodied in other specific forms without departing 
from its spirit or essential characteristics. The described embodiments are to be considered 
in all respects only as illustrative and not restrictive. The scope of the invention is, 
therefore, indicated by the appended claims rather than by the foregoing description. All 
changes which come within the meaning and range of equivalency of the claims are to be 
embraced within their scope. 

What is claimed and desired to be secured by United States Letters Patent is: 
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1. In a computer network including a server computer system network 
connectable to at least a plurality of client computer systems for which the server computer 
system maintains presence information, a method of exercising fine grain control of access 
to the presence information using a plurality of access permission types used for accessing 
the presence information, the method comprising the following: 

an act of the server computer system receiving a request from a client 
computer system including an instruction to change an access permission status for 
at least a subset of the plurality of client computer systems, the access permission 
corresponding to one of the plurality of access permission types to the presence 
information; 

an act of the server computer system setting at least an entry in a data field 
in response to the request, the entry representing the changed access permission 
status; and 

an act of the server computer system determining whether or not to allow 
access to the presence information based on the entry in the data field, 

2. The method in accordance with Claim 1, wherein the instruction to change 
an access permission comprises an instruction affecting permission to view accurate 
presence information. 

3. The method in accordance with Claim 1, wherein the instruction to change 
an access permission comprises an instruction affecting permission to view any presence 
information. 
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4. The method in accordance with Claim 1, wherein the instruction to change 
an access permission comprises an instruction to restrict the ability to act on presence 
information. 

5. The method in accordance with Claim 4, wherein the instruction to restrict 
the ability to act on presence information comprises an instruction to prohibit sending 
messages to a computer system that corresponds to the presence information. 

6. The method in accordance with Claim 1, wherein the data field comprises 
access permission fields in a database, wherein the database comprises the following for 
each of the plurality of client computer systems: 

an identifier field that identifies the client computer system; 

a presence information field that represents the actual availability of the 
client computer system; 

a first access permission field that contains an access permission of a first 
access permission type when the client computer system requests access to the 
presence information; 

a second access permission field that contains an access permission of a 
second access permission type when the client computer system requests access to 
the presence information; and 

a manufactured presence information field to display to the client computer 
system if the client computer system has permission to view presence information, 
but does not have permission to view accurate presence information. 



- Page 25 - 



Docket No. 13768.135.1 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 



7. A computer-readable medium having computer-executable instructions for 
performing the acts recited in Claim 1 . 
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8. In a computer network including a server computer system network 
connectable to at least a plurality of client computer systems for which the server computer 
system maintains presence information, a method of exercising fine grain control of access 
to the presence information using a plurality of access permission types used for accessing 
the presence information, the method comprising the following: 

an act of the server computer system receiving a request from a client 
computer system including an instruction to change an access permission status for 
at least a subset of the plurality of client computer systems, the access permission 
corresponding to one of the plurality of access permission types to the presence 
information; and 

a step for the server computer system determining whether or not to allow 
access to the presence information based on the instruction. 

9. The method in accordance with Claim 8, wherein the step for the server 
computer system determining whether or not to allow access to the presence information 
based on the instruction comprises the following: 

an act of the server computer system setting at least an entry in a data field 
in response to the request, the entry representing the changed access permission 
status; and 

an act of the server computer system determining whether or not to allow 
access to the presence information based on the entry in the data field. 
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10. The method in accordance with Claim 8, wherein the instruction to change 
an access permission comprises an instruction affecting permission to view accurate 
presence information. 

11. The method in accordance with Claim 8, wherein the instruction to change 
an access permission comprises an instruction affecting permission to view any presence 
information. 

12. The method in accordance with Claim 8, wherein the instruction to change 
an access permission comprises an instruction to restrict the ability to act on presence 
information. 

13. The method in accordance with Claim 12, wherein the instruction to restrict 
the ability to act on presence information comprises an instruction to prohibit sending 
messages to a computer system that corresponds to the presence information. 

14. A computer-readable medium having computer-executable instructions for 
performing the act and step recited in Claim 8. 
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15. In a computer network including a server computer system network 
connectable to at least a plurality of client computer systems for which the server computer 
system maintains presence information, a method of exercising fine grain control of access 
to the presence information using a plurality of access permission types used for accessing 
the presence information, the method comprising the following: 

an act of a client computer system creating a request including an 
instruction to change an access permission status for at least a subset of the 
plurality of computer systems, the access permission corresponding to one of the 
plurality of access permission types to the presence information; and 

an act of a client computer system transmitting the request to the server 
computer system. 

16. The method in accordance with Claim 15, wherein the instruction to change 
an access permission comprises an instruction affecting permission to view accurate 
presence information. 

17. The method in accordance with Claim 15, wherein the instruction to change 
an access permission comprises an instruction affecting permission to view any presence 
information. 

18. The method in accordance with Claim 15, wherein the instruction to change 
an access permission comprises an instruction to restrict the ability to act on presence 
information. 
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19. The method in accordance with Claim 18, wherein the instruction to restrict 
the ability to act on presence information comprises an instruction to prohibit sending 
messages to a computer system that corresponds to the presence information. 

20. The method in accordance with Claim 15, wherein the request comprises a 
data structure stored in a computer-readable medium, wherein the data structure comprises; 

a principle identifier field that identifies the client computer system to 
which the access permission status is to apply; 

a grant field that identifies any permission types that are to be granted to 
the client computer system; and 

a deny field that identifies any permission types that are to be denied to the 
client computer system. 

21. The method in accordance with Claim 20, wherein the data structure further 
comprises: 

an authentication field identifying authentication methods that are to be 
used when authenticating the client computer system to the server computer 
system. 

22. A computer-readable medium having computer-executable instructions for 
performing the acts recites in Claim 15. 
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23. A computer-readable medium having stored thereon a data structure having 
a plurality of fields, the data structure comprising: 

a principle identifier field that identifies a client computer system to which 
access control is to apply when accessing presence information; 

a grant field that identifies any permission types that are to be granted to 
the client computer system when the client computer requests access to the 
presence information; and 

a deny field that identifies any permission types that are to be denied to the 
client computer system when the client computer requests access to the presence 
information. 

24. The computer-readable medium in accordance with Claim 23, wherein the 
data structure further comprises: 

an authentication field identifying authentication methods that are to be 
used when authenticating the client computer system to a server computer system 
that maintains the presence information. 



-Page 31 - 



DocketNo. 13768.135.1 



